In article <B5C5F99D765BB744B54FFDF35F60262109F879C0@(protected) >, Jacques
Kilchoer <Jacques.Kilchoer@(protected) > writes
>I hope you don 't mean that you leave the SYS and SYSTEM passwords to the
>defaults used at database creation time.=20
Hi,
The OP should not leave any default users passwords set to their default
values. Damage or escalation of privileges is possible from many if not
all of the default accounts. Don 't just assume that because the database
is behind a firewall that its safe to leave it insecure.
kind regards
Pete
--
Pete Finnigan
email:pete@(protected)
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.
-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ------
To unsubscribe send email to: oracle-l-request@(protected)
put 'unsubscribe ' in the subject line.
--
Archives are at http://www.freelists.org/archives/oracle-l/
FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- --
